The features and advantages of the present invention will become apparent from the following detailed description of the present invention in which:
An embodiment of the present invention is a system and method relating to using a cross-platform management architecture providing a secure execution environment independent of the host operating system. In at least one embodiment, the present invention is intended to enable autonomic, utility, and on-demand computing.
Reference in the specification to “one embodiment” or “an embodiment” of the present invention means that a particular feature, structure or characteristic described in connection with the embodiment is included in at least one embodiment of the present invention. Thus, the appearances of the phrase “in one embodiment” appearing in various places throughout the specification are not necessarily all referring to the same embodiment.
For purposes of explanation, specific configurations and details are set forth in order to provide a thorough understanding of the present invention. However, it will be apparent to one of ordinary skill in the art that embodiments of the present invention may be practiced without the specific details presented herein. Furthermore, well-known features may be omitted or simplified in order not to obscure the present invention. Various examples may be given throughout this description. These are merely descriptions of specific embodiments of the invention. The scope of the invention is not limited to the examples given.
The processor 101 may be further connected to I/O devices via an input/output controller hub (ICH) 107. The ICH may be coupled to various devices, such as a super I/O controller (SIO), keyboard controller (KBC), or trusted platform module (TPM) via a low pin count (LPC) bus 102. The SIO, for instance, may have access to floppy drives or industry standard architecture (ISA) devices. In an embodiment, the ICH is coupled to non-volatile memory via a serial peripheral interface (SPI) bus 104. The non-volatile memory may be flash memory or static random access memory (SRAM), or the like. A platform management μcontroller 110n may be present on the platform 100. The PM μcontroller 110n may connect to the ICH via a bus 112, typically a peripheral component interconnect (PCI) or PCI express bus. The PM μcontroller may also be coupled with the non-volatile memory store (NV store) 117 via the SPI bus 104. The NV store 117 may be flash memory or static RAM (SRAM), or the like. In many existing systems, the NV store is flash memory.
In embodiments, the PM μcontroller 110n may be likened to a “miniature” or an embedded processor. Like a full capability processor, the PM μcontroller has a processor unit 111 which may be operatively coupled to a cache memory 115, as well as RAM and ROM memory 113. The PM μcontroller may have a built-in network interface and independent connection to a power supply 125 to enable out-of-band communication even when the host processor 101 is not active.
In embodiments, the processor 101 has a basic input output system (BIOS) 119 in the NV store 117. In other embodiments, the processor 101 boots from a remote device (not shown) and the boot vector (pointer) resides in the BIOS portion 119 of the NV store 117. The PM μcontroller may have access to all of the contents of the NV store 117, including the BIOS portion 119 and a protected portion 121 of the non-volatile memory. In some embodiments, the protected portion 121 of memory may be secured with Intel® Active Management Technology (IAMT). The PM μcontroller may run an IAMT software stack. More information about IAMT may be found on the public Internet at URL www-intel-com/technology/manage/iamt/. (Note that periods have been replaced with dashes in URLs contained within this document in order to avoid inadvertent hyperlinks).
Since the BIOS portion of non-volatile memory may be modified by the OS or applications running within the OS, it can be vulnerable to malicious tampering. In embodiments, the protected area of memory 121, available only to the PM μcontroller, may be used to store critical boot vector and other information without risk of tampering. The only way to access the PM μcontroller side of the NV store 117 may be through verification via a proxy through the PM μcontroller, i.e., signature authentication or the like.
Many existing systems use the extensible firmware interface (EFI) based platform firmware and its associated flash variables. The EFI is a specification which defines a new model for the interface between operating systems and platform firmware, commonly known as Basic Input Output System (BIOS). The specification version 1.10, published Dec. 1, 2002, is available on the public Internet at URL developer-intel-com/technology/efi/main_specification.htm.
Embodiments of the present invention may utilize an architecture comprising a cross platform specification for platform manageability. Referring to
EOI 237 allows external entities to access and control the PM runtime environment 230 remotely. EOI 237 provides functionality such as discovery of platform capabilities, sensors, asset information, run diagnostic applications, provision the system, etc. PMAI 239 provides administrative functionality to regulate PM runtime environment 230. PMAI 239 allows actions such as querying/patching of drivers, OS, CMs, install/remove/star/stop of CMs, start/stop PM, etc. The SEI 231 defines functions which generically allows enumeration of devices on a system, read sensor data, write effector data etc. PMAI 239 and EOI 237 may be invoked remotely by an IT administrator. The architecture does not define any interface or mechanism to collaborate with the host operating system (OS) 210. A platform management solution running on desktops, servers or handhelds can offer more flexibility and control when co-operating with the OS. The interface between the PM and host OS 210 is shown as 225.
Embodiments of the present invention comprise a mechanism to allow a local management entity 205 running on the OS to communicate with the platform manageability component 230 and for the platform manageability component to monitor OS activity via Extensible Firmware Interface (EFI) runtime services 220 (207, 209, 211). In embodiments, the architecture utilizes “OS Sensors” 203 running in context of the OS 210 which allows the platform manageability infrastructure to monitor the OS health. The EFI runtime drivers 220 export an interface so that OS sensor information may be provided to the platform manageability infrastructure 230. The EFI runtime driver also exposes an interface so that the OS sensor driver may receive commands from an OS specific CM running in the context of PM runtime environment 230. By exposing the platform manageability interface to the OS, and allowing the platform manageability infrastructure to monitor OS activity and control OS recovery actions, embodiments of the present invention provide a versatile management solution that complements existing platform manageability architecture. Embodiments of the invention may be backward compatible with traditional BMC (Baseboard Management Controller) based platform management solutions, as discussed in conjunction with
The platform manageability (PM) runtime 230 may be able to perform post-crash (OS) recovery based on information received from the OS sensor driver 203 up to the crash point. The runtime information may be collected by the OS sensor driver 203 and forwarded to the PM runtime 230 for processing. It will be apparent to one of ordinary skill in the art that various communication methods may be used. For instance, information may be passed via mailboxes, shared memory, or other communication methods. Recommendations may be sent back to the management application 201 or to a remote station 260 to effect changes in the system. Existing systems may check for version compatibility between the platform hardware/BIOS and platform OS/drivers. Embodiments of the present invention may also analyze the crash dump to perform more intelligent analysis. The PM may be able to forestall an OS crash, or provide recommendations to improve poor performance by monitoring OS performance data received from the OS sensor driver 203 through the SEI 211.
The EFI architecture defines a modular interface between the platform firmware (commonly known as BIOS) and the operating system (OS). An EFI compliant firmware implementation exports a data structure called the EFI system table to the OS and the OS loader. The OS must be EFI-aware to access the EFI system table which contains data (e.g. ACPI table) and a set of services (function pointers) know as the EFI runtime services. These services provide the OS with functionality such as retrieving/setting system time/date, querying/setting NVRAM variables etc. While these are just a handful set of standard services, EFI services are extensible to provide the OS with additional valuable functionality. Embodiments of the present invention extend the standard EFI runtime services to provide an interface to the platform manageability hardware in an OS-independent fashion and provide OS health information to the platform manageability infrastructure. EFI services may also be provided for traditional BMC (Baseboard Management Controller) based platform management hardware. Traditional BMC based platform management solutions are common on server platforms.
In an embodiment, embedded platform manageability component 230 comprises an ancillary processor or a microcontroller which co-exists with the host processor and may be integrated in the chipset or as a PCI device, as discussed in an exemplary embodiment in
Referring now to
Referring again to
In
Referring again to
Referring again to
In existing systems, a BMC 307 knows nothing about the health of the OS. For instance, BMC is unaware of an OS crash; the BMC is disconnected from the OS. In embodiments of platform manageability disclosed herein, the PM may be able to heal and repair OS problems. In contrast to traditional BMC-IPMI management, the PM has the ability to identify causes of an OS crash due to an extensible interface with the platform components. The PM driver 327 may have the ability to identify hardware driver problems and effect driver updates and then reboot the OS 323. Other updates may be effected, for instance, operating system (OS) patches, and BIOS updates. Traditional BMC management systems are strictly platform hardware management-centric. Embodiments of the PM system may query the OS to determine memory consumption, whether the system is running inefficiently, or whether a specific patch has been installed, i.e., a service pack. Embodiments may manage inventory of the platform, as well. The OS Sensor driver 325 communicates this information to the PM system through the PM specific EFI runtime drivers 340.
The OS sensor driver 325 may also provides the same information to a remote entity (i.e., 260 of
Platform management capability embedded in any platform, may be transparently exposed to the host OS as runtime EFI services, as can be seen in the right side of
The API has no bearing on the underlying platform management hardware 345 or the interface it uses to communicate with other devices on the management bus. EFI runtimes services 340 may be implemented as runtime EFI drivers 341, 343 which are loaded by the EFI based firmware during pre-boot and persist in memory after post-boot. An EFI compliant OS can easily use these services.
Referring again to
Referring now to
The OS Sensor is a pseudo-sensor in the sense that it is not a physical sensor, but reads data related to OS performance, activity, software inventory etc. The SEI driver calls functions defined by SEI which are required to be implemented by every sensor driver including the OS sensor driver. It does not matter whether the sensor is physical or a pseudo-sensor. If the requested data is related to the OS, then the OS sensor driver returns the data to the EFI service in the same fashion as a physical sensor would.
The techniques described herein are not limited to any particular hardware or software configuration; they may find applicability in any computing, consumer electronics, or processing environment. The techniques may be implemented in hardware, software, or a combination of the two.
For simulations, program code may represent hardware using a hardware description language or another functional description language which essentially provides a model of how designed hardware is expected to perform. Program code may be assembly or machine language, or data that may be compiled and/or interpreted. Furthermore, it is common in the art to speak of software, in one form or another as taking an action or causing a result. Such expressions are merely a shorthand way of stating execution of program code by a processing system which causes a processor to perform an action or produce a result.
Each program may be implemented in a high level procedural or object-oriented programming language to communicate with a processing system. However, programs may be implemented in assembly or machine language, if desired. In any case, the language may be compiled or interpreted.
Program instructions may be used to cause a general-purpose or special-purpose processing system that is programmed with the instructions to perform the operations described herein. Alternatively, the operations may be performed by specific hardware components that contain hardwired logic for performing the operations, or by any combination of programmed computer components and custom hardware components. The methods described herein may be provided as a computer program product that may include a machine accessible medium having stored thereon instructions that may be used to program a processing system or other electronic device to perform the methods.
Program code, or instructions, may be stored in, for example, volatile and/or non-volatile memory, such as storage devices and/or an associated machine readable or machine accessible medium including solid-state memory, hard-drives, floppy-disks, optical storage, tapes, flash memory, memory sticks, digital video disks, digital versatile discs (DVDs), etc., as well as more exotic mediums such as machine-accessible biological state preserving storage. A machine readable medium may include any mechanism for storing, transmitting, or receiving information in a form readable by a machine, and the medium may include a tangible medium through which electrical, optical, acoustical or other form of propagated signals or carrier wave encoding the program code may pass, such as antennas, optical fibers, communications interfaces, etc. Program code may be transmitted in the form of packets, serial data, parallel data, propagated signals, etc., and may be used in a compressed or encrypted format.
Program code may be implemented in programs executing on programmable machines such as mobile or stationary computers, personal digital assistants, set top boxes, cellular telephones and pagers, consumer electronics devices (including DVD players, personal video recorders, personal video players, satellite receivers, stereo receivers, cable TV receivers), and other electronic devices, each including a processor, volatile and/or non-volatile memory readable by the processor, at least one input device and/or one or more output devices. Program code may be applied to the data entered using the input device to perform the described embodiments and to generate output information. The output information may be applied to one or more output devices. One of ordinary skill in the art may appreciate that embodiments of the disclosed subject matter can be practiced with various computer system configurations, including multiprocessor or multiple-core processor systems, minicomputers, mainframe computers, as well as pervasive or miniature computers or processors that may be embedded into virtually any device. Embodiments of the disclosed subject matter can also be practiced in distributed computing environments where tasks or portions thereof may be performed by remote processing devices that are linked through a communications network.
Although operations may be described as a sequential process, some of the operations may in fact be performed in parallel, concurrently, and/or in a distributed environment, and with program code stored locally and/or remotely for access by single or multi-processor machines. In addition, in some embodiments the order of operations may be rearranged without departing from the spirit of the disclosed subject matter. Program code may be used by or in conjunction with embedded controllers.
While this invention has been described with reference to illustrative embodiments, this description is not intended to be construed in a limiting sense. Various modifications of the illustrative embodiments, as well as other embodiments of the invention, which are apparent to persons skilled in the art to which the invention pertains are deemed to lie within the spirit and scope of the invention.